last day (14 days later) » 

1:34 PM
0
A: Google oauth2 migration issue, missing openid_id

DaImToI am thinking you were hit by the deprecation hammer. web applications that use the deprecated OpenID 2.0 for Google login, see OpenID 2.0 (Deprecated). For information about using the deprecated OpenID 2.0 authentication with Google Apps (hosted) accounts, see OpenID API for Google App...

 
Yes exactly. I'm now trying to map the old openid_id data to the new 'sub' data. But as 'openid_id' isn't returned to me anymore, it's impossible for me to link the right accounts. How can I get Google to return the 'openid_id' values again?
 
you cant this system was shut down in 2015 you have had two years to fix the data in your database to map things. Now its gone.
 
It says on the migration page: Tip: If you overwrite a user's OpenID 2.0 identifier (openid_id) and need to find it again, you can repeat the process of including an openid.realm parameter in an authentication request and mapping the returned openid_id to the new sub ID.
Seems its still possible. I just dont understand how.
 
It seams that was possible prior to mapping of OpenID 2.0 identifiers to OAuth 2.0 identifiers will continue to work until January 1, 2017. I am not all that sure it is still posible
take one of your ids and feed it to this googleapis.com/oauth2/v3/tokeninfo?id_token=XYZ123 I am kind of digging around in documentation here.
 
hey :) thanks for helping
i tried what you said, it returns: i.imgur.com/JvV9alf.png
but not openid_id
 
1:36 PM
you wont get an open_id your going to have to remap them to something probably the id in the sub field I think.
 
yeah, to start using the "sub" field is no problem from now on. i'm just worried about my old users
somehow i gotta verify them
 
if you take their open id and send it though the tokeninfo endpoint you should be able to get back the sub one that way.
 
ok, will see if i can get that working :) thanks!
 
good luck read though that migration page a few times. google is normally really good about telling you what to do and what to link to.
 
2:01 PM
but it seems openid_id isn't encoded anymore into the id_token string
at least I'm not finding it
 

last day (14 days later) »